php-testing

Pass

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill guides the agent to perform standard development tasks using composer and PHP test runners (phpunit, pest). These are routine operations for a software development assistant.
  • [EXTERNAL_DOWNLOADS]: The instructions involve downloading official testing frameworks from well-known package registries via Composer and referencing official documentation sites such as phpunit.de and pestphp.com. These sources are established and safe for software development purposes.
  • [INDIRECT_PROMPT_INJECTION]: The skill's workflow involves reading the target codebase to identify existing test structures, creating an ingestion surface for project-specific data.
  • Ingestion points: Existing test files and configuration files (phpunit.xml, Pest.php) identified during codebase exploration in the fuse-ai-pilot:explore-codebase step.
  • Boundary markers: The skill does not define explicit delimiters for codebase content, relying on the underlying agent's context window management.
  • Capability inventory: The agent is authorized to execute shell commands for dependency management and test execution.
  • Sanitization: Not applicable, as the skill focus is on analyzing the structure of valid source code for the purpose of generating test cases.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 29, 2026, 06:14 AM